1. Controller
Kirsten Schelte, DBA Elevata.Studio, 3994 Lauren Court, Destin, FL 32541, USA. Email: kirsten@elevata.studio. This website addresses clients in the European Union as well; where the EU General Data Protection Regulation (GDPR) applies, the rights described below are granted accordingly.
2. What this website does not do
We use no advertising, no tracking pixels, no analytics services and no marketing cookies. We do not sell personal data.
3. Hosting and server logs
This website is hosted by STRATO GmbH, Berlin, Germany. When you visit the site, the web server automatically processes technical data (such as IP address, date and time, requested page, browser type) in server log files for the purpose of operating and securing the website (legitimate interest, Art. 6 (1) f GDPR). Log files are deleted according to the hosting provider's standard retention periods.
4. Local storage
Your language preference (EN/DE/IT) is stored in your browser's local storage on your device only. It is not transmitted to us and you can delete it at any time in your browser settings. If you sign in to the client area, the sign-in token is also kept in your browser's storage.
5. Booking and contact requests
If you use the consultation form, we process the data you provide (name, email address, selected experience, your message, chosen language) to answer your request and prepare the consultation (Art. 6 (1) b GDPR). The data is stored in our client database operated on Supabase with data location in Frankfurt, Germany, and is additionally sent to us by email. We keep requests only as long as needed for the purpose or as required by law.
6. Private client area
The client area uses a passwordless email sign-in. For registered clients we process the email address, name, language preference and the outfit proposals with your reactions, in order to provide the personal styling service you requested (Art. 6 (1) b GDPR). This data is stored on Supabase (data location Frankfurt, Germany). Sign-in emails are sent via our email provider STRATO (Germany).
7. Voice assistant "Kiki"
Our pages show a conversational assistant provided by ElevenLabs. The widget is loaded from an external source (unpkg.com). If you start a conversation, the content of that conversation, and, if you speak, your voice recording, is processed by ElevenLabs in order to answer you (Art. 6 (1) f GDPR, our legitimate interest in advising visitors; where required, on the basis of your consent given by starting the conversation). Your microphone is only used after you actively start a voice conversation and your browser asks for permission. Please do not share sensitive personal information with the assistant. If you prefer not to use it, simply leave it closed and write to kirsten@elevata.studio instead.
8. Recipients and processors
We use the following processors: STRATO GmbH (hosting and email, Germany), Supabase (database and authentication, data hosted in Frankfurt, Germany) and ElevenLabs (voice assistant). We do not share personal data with other third parties unless legally required.
9. Your rights
Where the GDPR applies, you have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. To exercise your rights, simply write to kirsten@elevata.studio. You can delete your client account at any time by requesting this by email.